Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d658f22a-7382-3930-ab13-2d0787071ab4.roa
File: d658f22a-7382-3930-ab13-2d0787071ab4.roa (raw, json)
Hash identifier: vUz8863mGPeDAkpuoYZ4cjFg1H8VjxsI1BGziKexVJ0=
Subject key identifier: 8D:43:66:FA:5C:47:DE:73:EC:8F:A8:5B:22:29:6F:11:18:85:D2:EF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF616CFED6C4D61E8623BC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d658f22a-7382-3930-ab13-2d0787071ab4.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.226.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:6c:fe:d6:c4:d6:1e:86:23:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=89c2fd03-3299-42ed-8ea9-87df5bc4e829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:1b:07:50:cf:bf:d5:ff:d0:ea:73:1d:49:
36:43:52:a7:22:5c:f0:e6:69:f1:28:ce:51:6e:a0:
32:ef:04:66:d9:ff:26:db:c8:25:34:e4:cc:20:4f:
b9:76:73:a0:db:43:db:3b:67:14:86:d2:06:87:7b:
63:c3:97:ab:41:d5:fa:63:78:6a:18:d5:ef:0e:6c:
38:39:48:8d:c8:88:cb:0e:bf:ad:b2:7a:a8:c4:1c:
38:60:94:f7:35:7b:02:f8:e0:3e:56:c8:b1:ab:b1:
ee:bd:05:b9:16:26:2f:f9:85:ef:a7:8a:11:fa:96:
63:bf:45:ef:36:7e:8a:f0:f9:a5:f7:16:70:b9:4a:
f8:df:3d:00:ae:b4:52:b0:57:f7:0d:24:2c:8e:c8:
90:6c:f1:3f:4d:a9:00:a4:c2:1d:2a:63:f9:ef:90:
db:40:96:f8:ef:6e:9b:25:c0:11:15:0d:b4:5a:ed:
d5:7b:b0:b1:a0:10:6f:2c:10:d9:2e:af:27:24:f5:
05:60:77:0c:e6:45:4a:66:62:ba:e5:65:d6:f4:85:
b5:23:4d:c8:42:e1:30:79:59:aa:d6:6c:1e:94:e2:
68:0b:b7:d2:65:e7:cd:74:49:c9:ef:5f:58:a2:45:
a0:cd:c3:bd:c8:8b:e4:f2:f6:4f:48:4d:1b:54:42:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:43:66:FA:5C:47:DE:73:EC:8F:A8:5B:22:29:6F:11:18:85:D2:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d658f22a-7382-3930-ab13-2d0787071ab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:07:6e:2b:47:3e:76:3b:7b:2b:08:79:76:57:c7:e7:e8:4d:
9e:d2:de:00:f1:e7:7c:aa:5b:e9:25:4b:d3:0a:8e:db:d1:fc:
d0:e6:d9:a6:ad:cd:07:88:4f:b6:0d:b4:a1:54:46:ee:79:f7:
43:36:cf:3d:b4:15:2d:05:5b:11:98:85:8d:1c:81:94:19:9c:
ca:5a:98:65:c5:84:72:de:1f:2d:db:ee:0d:a7:b2:c1:ef:22:
c4:f5:68:29:14:30:6c:d5:8d:5d:c0:7f:ac:a6:8c:d8:2e:3c:
0f:55:34:ba:03:94:f0:d3:c2:ce:11:93:35:fd:77:44:65:d4:
ee:c8:ce:4f:e1:0c:ac:34:f0:1a:59:b3:30:d9:2b:8c:a6:72:
ee:ee:5f:6f:3b:8d:ae:8f:de:63:10:a4:2c:9e:d2:cc:a6:3a:
7a:4b:81:ee:dc:dd:3c:38:42:13:0f:2e:93:d3:5c:49:f2:34:
22:f7:b3:67:f8:9d:d7:45:ed:a8:86:a3:63:f9:ee:b0:00:01:
26:5d:77:d6:6a:8a:43:49:76:5e:d4:95:f5:35:f9:df:ab:b4:
04:a7:db:43:e6:35:48:a0:b5:43:81:6a:bc:e1:e6:64:2d:81:
1f:24:a2:a2:61:f3:c4:2c:31:12:23:fb:db:27:15:cc:9c:5f:
91:ca:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:45 2025 by rpki-client